Latest CVE Feed
-
5.5
MEDIUMCVE-2023-3359
An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.... Read more
Affected Products : linux_kernel- Published: Jun. 28, 2023
- Modified: Mar. 07, 2025
-
5.5
MEDIUMCVE-2018-4431
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.... Read more
- Published: Apr. 03, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4418
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.... Read more
Affected Products : mac_os_x- Published: Apr. 03, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-3355
A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash th... Read more
Affected Products : linux_kernel- Published: Jun. 28, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4399
An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.... Read more
- Published: Apr. 03, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4391
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously ... Read more
- Published: Oct. 27, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4348
A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.... Read more
Affected Products : mac_os_x- Published: Apr. 03, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-3195
A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service.... Read more
- Published: Jun. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-41072
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.... Read more
- Published: Oct. 25, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.... Read more
Affected Products : linux_kernel- Published: Jun. 20, 2023
- Modified: Mar. 11, 2025
-
5.5
MEDIUMCVE-2018-4235
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform... Read more
- Published: Jun. 08, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4226
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves t... Read more
- Published: Jun. 08, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4223
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass ... Read more
- Published: Jun. 08, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-3161
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and poss... Read more
- Published: Jun. 12, 2023
- Modified: Mar. 11, 2025
-
5.5
MEDIUMCVE-2023-3164
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.... Read more
- Published: Nov. 02, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4176
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.... Read more
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-4090
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass ... Read more
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-3195
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols... Read more
- Published: Oct. 17, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-21232
re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.... Read more
Affected Products : re2c- Published: Apr. 29, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-7822
An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logge... Read more
- Published: May. 22, 2019
- Modified: Nov. 21, 2024